Senior Digital Forensics and Incident Response (DFIR) Consultant

CYPFER; Ireland; On-site; EUR 70,000 - 110,000; Full time

Job summary

Forensic Focus is seeking an experienced DFIR practitioner to lead incident response engagements in Ireland. The role combines hands-on forensic work with client communication and junior team coordination.

You will perform disk and memory acquisitions, IOC triage, log reviews and timeline construction, and present interim findings to clients across insurance, legal, and enterprise sectors. Travel to client sites is frequent.

Qualifications

• 3–5+ years in DFIR or related cybersecurity, with advanced forensic analysis capability.
• GCFA or GCFR certification strongly preferred.
• Scripting skills in Python or PowerShell.
• Endpoint forensics knowledge with EDR experience and SIEM/SOAR familiarity.

Responsibilities

• Leads discrete workstreams within active incident response engagements.
• Coordinates junior consultants and ensures deliverables meet quality standards.
• Forensic disk and memory acquisition, IOC triage, log review, and timeline construction.
• Present interim findings to clients across insurance, legal, and enterprise sectors.
• Frequent short‑notice travel to client sites.

Skills

DFIR experience

Python scripting

PowerShell scripting

Endpoint forensics

EDR (CrowdStrike Falcon)

SIEM/SOAR familiarity

Tools

CrowdStrike Falcon

Job description

The Role

This position leads discrete workstreams within active incident response engagements, coordinating junior consultants and ensuring deliverables meet quality standards. Responsibilities include forensic disk and memory acquisition, IOC triage, log review, timeline construction, and presenting interim findings to clients across insurance, legal, and enterprise sectors.

Skills & Experience

Requires 3-5+ years in DFIR or related cybersecurity work, with advanced forensic analysis capability. GCFA or GCFR certification strongly preferred. Candidates should have scripting skills in Python or PowerShell, endpoint forensics knowledge, EDR experience (e.g., CrowdStrike Falcon), and familiarity with SIEM/SOAR platforms.

Who It Suits

Ideal for an experienced DFIR practitioner ready to step into engagement leadership, comfortable balancing hands‑on technical casework with client communication, team coordination, and frequent short‑notice travel to client sites.